Workday is making its Trusted Agent Platform headless, allowing enterprises to build and run AI agents for human resources and finance using their preferred development tools, frameworks, and AI models. Announced at Workday Rising 2026, the update aims to extend AI automation beyond Workday’s own interface while retaining existing permissions, approval workflows, and audit trails. The move targets a central enterprise AI challenge: enabling autonomous software to work with sensitive business data without bypassing organizational controls.

Workday Opens Its AI Agent Platform to External Tools and Models

Workday is opening its enterprise AI infrastructure to a wider range of developers, giving customers more flexibility to build agents that interact with human resources and finance systems while operating within established business rules.

The company announced at Workday Rising 2026 that its Trusted Agent Platform is now headless, meaning agents can access supported capabilities without requiring a person to work through the standard Workday user interface. Workday says its own agents, customer-built agents, and partner-developed agents can operate under the same permissions, approval requirements, and audit controls.

The change addresses a growing challenge for enterprises adopting agentic AI: connecting autonomous software to sensitive business systems without creating new security gaps or duplicating existing governance frameworks.

Connecting AI agents to governed enterprise data

Workday’s Trusted Agent Platform brings together several components: Workday Data Cloud, Agent-Ready Tools, Developer Agent, Custom Agents, and Agent Harness. The company says these components are generally available, although additional Agent Harness capabilities are planned for early 2027.

Agent-Ready Tools use the Model Context Protocol (MCP), an open standard that allows compatible AI applications to connect with external systems and invoke supported tools. Workday’s implementation is designed to let agents retrieve authorized information and perform permitted actions while carrying the relevant access controls into each interaction.

Live Data Query provides another route to enterprise information. It allows users and agents to query live Workday data through SQL, using Workday Data Cloud rather than relying on manually maintained reports or separate copies of operational data.

For HR departments, this could enable agents to answer workforce questions, retrieve authorized employee information, or support internal talent workflows without creating a separate data-access mechanism for every application. Finance teams could similarly build agents that work with approved financial information while respecting organizational controls.

The distinction is important because connecting an AI model to a database does not automatically give it the context needed to interpret business rules. Workday’s approach aims to combine data access with the permissions and processes that already govern enterprise operations.

Agent Harness puts business context at the center

Workday’s Agent Harness is designed to provide each agent with the information and constraints relevant to its task. This can include a user’s role, reporting relationships, data-access rights, applicable policies, and the business processes that govern an action.

The company argues that more capable AI models alone cannot eliminate errors in enterprise workflows. Its engineering research highlights how language models can misapply HR policies even when the correct policy is available. Embedding agents in the context of the systems that run HR and finance is intended to reduce that risk.

Consider a manager asking an agent to transfer an employee into a position that the manager is not authorized to fill. Under Workday’s proposed model, the agent should identify the authorization issue and direct the manager to the appropriate next step rather than execute the change.

Workday plans to add Agent Context Service and Grounded Reasoning to Agent Harness in early 2027. According to the company, the former will identify relevant Workday context before an agent begins reasoning, while the latter will check requests against business policies, processes, and tenant data before actions are taken.

These capabilities are planned additions, not features that should be assumed available in the current release.

Developers can choose their tools and models

The headless platform also gives developers greater flexibility in how they build agents. Workday’s Developer Agent, now generally available, allows teams to describe an agent or application in natural language and use Workday’s domain knowledge and development capabilities to create it.

Developers can work through tools including Claude Code, Codex, Cursor, and the Workday Developer Site. Customers can also build custom agents using frameworks such as Google ADK and LangChain, then deploy them through Agent Harness.

The company says customers can select models from Anthropic, Google, Meta, Mistral, OpenAI, and NVIDIA, including NVIDIA’s Nemotron open models. This model flexibility could help organizations select different models according to task complexity, cost, performance, and deployment requirements.

Anthropic and NVIDIA welcomed the announcement, emphasizing the potential to connect AI development tools with governed enterprise workflows. Those statements represent partner perspectives, rather than independent evidence of platform performance.

Governance becomes a competitive differentiator

Workday’s announcement comes as enterprise software vendors compete to make AI agents useful beyond isolated demonstrations. Microsoft, SAP, and Oracle are also developing AI capabilities across enterprise applications, creating pressure to combine flexible model access with reliable execution and security.

Workday’s proposition is that customers should not need to rebuild HR and finance controls for every new agent. Instead, agents can use approved tools and operate within the governance already established in Workday.

That approach may reduce the risks associated with uncontrolled data copies, overly broad system accounts, and actions that cannot be traced. However, governance still depends on correct configuration, sound identity management, effective testing, and appropriate oversight. MCP itself is a connectivity standard, not a guarantee of secure behavior.

For HR leaders, the platform could support internal mobility, workforce analysis, and other processes that depend on sensitive employee information. Finance teams could use similar capabilities for reporting, analysis, and controlled workflows.

The central test will be whether enterprises can build useful agents without increasing operational risk or making governance harder to manage. Workday is positioning its platform as an infrastructure layer for that transition, with greater developer choice balanced against centralized controls.

Market Landscape

Enterprise AI infrastructure is moving toward platforms that let organizations build agents with different models and development frameworks while enforcing consistent security and governance.

• Workday: Focuses on governed access to HR and finance data, supported tools, agent execution, and enterprise business rules.

• Microsoft: Connects AI agents with enterprise productivity and business applications through its AI and automation ecosystem.

• SAP: Is developing AI capabilities across enterprise resource planning, finance, HR, and business processes.

• Oracle: Combines enterprise applications, cloud infrastructure, and AI capabilities across HR and finance workflows.

• Open agent frameworks: MCP, Google ADK, and LangChain give developers ways to connect models and tools, while enterprise platforms provide additional controls and business context.

Workday’s main differentiator is its attempt to make existing HR and finance permissions part of the agent execution layer. Its success will depend on interoperability, security, developer adoption, and how consistently agents respect business rules in real-world deployments.

Top Insights

• Workday’s headless Trusted Agent Platform lets customers build and run HR and finance agents outside its standard user interface.

• Agent-Ready Tools and Live Data Query provide routes to authorized enterprise data without relying solely on static exports or custom reports.

• Agent Harness supplies task-specific business context, permissions, and process rules intended to help agents operate within enterprise controls.

• Developers can use external frameworks and select models from providers including Anthropic, Google, OpenAI, Meta, Mistral, and NVIDIA.

• Agent Context Service and Grounded Reasoning are planned for early 2027, extending the platform’s proposed context and policy-validation capabilities.

  Join thousands of HR leaders who rely on HRTechEdge for the latest in workforce technology, AI-driven HR solutions, and strategic insights